SSL certificate on docs.astropy.org

[saimn]

Following #8562, I noticed that there is no ssl certificate for docs.astropy.org (this is the only http url in my intersphinx settings) : https://docs.astropy.org/en/stable/
And actually readthedocs supports this, I just did the change for another custom domain: https://docs.readthedocs.io/en/stable/custom_domains.html#custom-domain-ssl

What is needed is to change the CNAME DNS record to readthedocs.io., instead of astropy.readthedocs.org., and then in readthedocs settings, revalidate the custom domain.

[bsipocz]

I'm not exactly sure where to changed that record, the following is what I see on the admin page:

Note the "Always use HTTPS for this domain" at the bottom, that was unclicked. Let's see whether it has any effect on the issue.

[saimn]

I would not check this currently, first someone needs to modify the DNS records, otherwise readthedocs will not build the certificate.

❯ dig docs.astropy.org

...

;; ANSWER SECTION:
docs.astropy.org.	670	IN	CNAME	astropy.readthedocs.org.
astropy.readthedocs.org. 300	IN	A	23.100.69.251

The CNAME must be changed to readthedocs.io., by someone who has access to the domain registar.

[bsipocz]

Oh, ok, fair enough, this case I got the wrong end of the stick (and I don't think I have access to the DNS records).

[pllim]

I bet it is @astrofrog or @perrygreenfield .

[perrygreenfield]

I don't think I do.

[hamogu]

Whatever the setting is currently, Firefox blocks me from accessing the docs because "docs.astropy.org uses an invalid security certificate."

I'll add an exception for myself and hoping that nobody tries to serve me a fake documentation in the interest of screwing up me research ;-)

[bsipocz]

@hamogu - yes, apparently we need to change our DNS entry setting to readthedocs.io, so we can use RTD's certificate. Not yet sure who the person with access to those settings is.
Maybe @eteq and/or @astrofrog.

[eteq]

I am the keeper of the DNS config. I just followed the steps @saimn and @bsipocz pointed to on the RTD config and in our DNS service, and if I did it all correctly we should be up and running in an hour or so once the SSL certificates get re-issued. If not... I'll troubleshoot further.

[astrofrog]

It looks like https://docs.astropy.org/en/stable/ works!

[pllim]

👏 Thanks, @eteq !

[eteq]

Hooray! I'm going to go ahead and close this then, since it's been 24 hours which is usually enough time for everything to propagate. @saimn, feel free to re-open if it's still not working for you though.

[saimn]

It works, thanks @eteq !

[mhvk]

As noted in #9032 (comment), the same SSL certificate stuff may be needed for devdocs

[pllim]

Okay, I re-opened this issue until we can sort out the devdocs.